Edge Proxy Key Forwarding for Secure Data Throughput
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The edge proxy in device-edge-cloud collaboration architectures incurs high computing resource consumption and reduced throughput due to frequent decryption and encryption of data during transmission, as it needs to decrypt data from terminals and re-encrypt it for the cloud, wasting resources and affecting key security.
Innovation Solution
The edge proxy sends key information to a server, allowing the server to generate and manage encryption keys, thus enabling the edge proxy to forward data without decryption or encryption, reducing its computational load and improving throughput.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the edge proxy decrypts and re-encrypts forwarded data, then data transmission security is ensured, but computing resource consumption increases and throughput decreases
Solution Approach 1:
The patent extracts the encryption and decryption operations from the edge proxy and relocates them to the terminal device. The terminal performs encryption before sending data to the edge proxy, which then forwards the encrypted data without decryption. This extraction eliminates the computational burden on the edge proxy while maintaining security through the terminal's encryption capability.
Solution Approach 2:
The patent introduces an intermediary mechanism where the terminal device acts as the security enforcement point rather than the edge proxy. The terminal encrypts data using a key established during secure connection setup, and the edge proxy serves merely as a transparent forwarding intermediary that does not need to process cryptographic operations, thus resolving the contradiction between security and performance.
2Reliability
If the edge proxy decrypts and re-encrypts forwarded data, then data transmission security is ensured, but computing resources are wasted
Solution Approach 1:
The patent extracts the computationally intensive decryption and re-encryption operations from the edge proxy and assigns them exclusively to the terminal device. The terminal encrypts data before transmission, and the edge proxy forwards the already-encrypted data without performing any cryptographic operations, thereby eliminating wasted computing resources while preserving security.
Solution Approach 2:
The terminal device performs self-service encryption of its own data before transmission to the edge proxy. By encrypting data locally using keys established during secure connection setup, the terminal serves its own security needs without requiring the edge proxy to expend computing resources on decryption or re-encryption operations.
Data Source
AI summary
Embodiments of this application provide a method and a related apparatus, for example, for data transmission. An example method can be applied to an edge proxy. The edge proxy can be a server having a reverse proxy function. The method includes: after the edge proxy establishes a secure connection to a terminal, determining first addition information corresponding to the terminal, where the first addition information carries key information for generating a first key, and the first key is a key determined when the terminal establishes the secure connection to the edge proxy; forming key transmission data based on the first addition information; and sending the key transmission data to a server.